Bob,

In the SpamFilter ISP's activity log each time an email is blcoked because of a keyword, the log will record something like the following:

09/08/04 00:02:35:032 -- (416) Found Keywords: [get your free]

In the quarantine database, the tblQuarantine table will also log the keywords in the RejectDetails column. You can find all emails blcoked due to keywords by executing the following query:

SELECT * FROM tblQuarantine WHERE (RejectID = 13)

Roberto F. LogSat Software

Since that feature isn't in the program now, you could try:

SELECT        rejectdetails,
              COUNT(*) AS detailcount
FROM          tblquarantine
WHERE         rejectid=13
AND           deliver = 0)
AND           expire = 0
AND           (Left(RejectDetails,44) <> 'Found Keywords: [Found prohibited attachment')
GROUP BY      rejectdetails
ORDER BY      detailcount DESC

This will return all keywords found, with the corresponding number of times found in the quarantine database in descending order, but will exclude the 'prohibited attachment' records.

Will this get you closer to what you want?

-Ric

You were close. Here is the report I was looking for. You may have to change the table name from dbo_tblQuarantine to tblQuarantine depending on your configuration.

SELECT DISTINCTROW Count(dbo_tblQuarantine.RejectDetails) AS CountOfRejectDetails, dbo_tblQuarantine.RejectDetails
FROM dbo_tblQuarantine
WHERE (((dbo_tblQuarantine.RejectID)=13))
GROUP BY dbo_tblQuarantine.RejectDetails
HAVING (((Count(dbo_tblQuarantine.RejectDetails)) Not Like "*Found prohibited attachment*"))
ORDER BY Count(dbo_tblQuarantine.RejectDetails) DESC;